fix(workspace): restore [workspace.package] keys + 3 missing workspace deps

Wave 2 audit (validator + critic-tech-debt + critic-bug, 2026-05-04) found
two regressions causing `cargo check --workspace` to hard-fail at HEAD aaa8f36:

== Regression A — [workspace.package] keys deleted in aaa8f36 ==
The P1+P2 perf commit accidentally dropped 4 keys from [workspace.package]:
  - authors    = ["Denis Parfionovich <parfionovich@keilab.io>"]
  - license    = "Apache-2.0"
  - repository = "https://github.com/KeiSei84/KeiSeiKit-1.0"
  - homepage   = "https://github.com/KeiSei84/KeiSeiKit-1.0"

100+ workspace member crates inherit via `authors.workspace = true` and
`license.workspace = true` (firewall-diff, frustration-matrix, kei-artifact,
all kei-auth-*, kei-ledger, kei-cortex, etc.). Without those keys cargo errors:

  error inheriting `authors` from workspace root manifest's
    workspace.package.authors
  Caused by: `workspace.package.authors` was not defined

The aaa8f36 commit body claimed "VERIFIED: cargo check --workspace exits
clean [REAL: ran in this session; 0 errors, warnings only]" — that claim
was false. RULE 0.4.b + RULE 0.16 STATUS-TRUTH violation by the orchestrator
itself. Original keys recovered from commit 7cc544f via
`git log -p main -L "/^\[workspace\.package\]/,/^\[/:_primitives/_rust/Cargo.toml"`.

== Regression B — 3 workspace.dependencies entries missing (pre-existing) ==
Earlier metadata-SSoT migrations (9aa29ac kei-cortex, 7cc544f bulk) moved
inline `tower="0.4"`, `dashmap="5"`, `notify="8"` to `{ workspace = true }`
without adding them to `[workspace.dependencies]`. cargo errors:

  error inheriting `tower` from workspace root manifest's workspace.dependencies.tower
  error inheriting `dashmap` from workspace root manifest's workspace.dependencies.dashmap
  error inheriting `notify` from workspace root manifest's workspace.dependencies.notify

Plus `clap = { workspace = true }` had only `["derive"]` while kei-migrate
uses `#[arg(env=...)]` requiring the `env` feature.

== Fix ==
- Restored 4 [workspace.package] keys (authors/license/repository/homepage)
- Added 3 missing [workspace.dependencies]:
    tower   = { version = "0.4", features = ["limit", "buffer", "util"] }
    dashmap = "5"
    notify  = "8"
- Added "env" feature to clap workspace entry

== Verification ==
[REAL: cd _primitives/_rust && cargo check --workspace --offline 2>&1 | grep -cE '^error']
  → 0 errors
[REAL: same command, full output filtered for 'generated N warnings']
  → 3 warnings in kei-cortex (private_interfaces, pre-existing, unrelated)
  → 2 warnings in frustration-matrix (pre-existing)

=== STATUS-TRUTH MARKER ===
shipped: functional
stubs: 0
cargo-check: PASS
behaviour-verified: yes
follow-up-required:
  - none for this commit (workspace builds)
  - separate commit required for kei-arch-map crate (planned next, branched off this)
  - separate commit required for #33 release.yml keigit publish target
  - separate commit required for #38 README/ARCHITECTURE 105→104 crate count

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

_primitives/_rust/Cargo.toml

@@ -184,9 +184,13 @@ members = [
 [workspace.package]
 edition = "2021"
 rust-version = "1.77"
+authors = ["Denis Parfionovich <parfionovich@keilab.io>"]
+license = "Apache-2.0"
+repository = "https://github.com/KeiSei84/KeiSeiKit-1.0"
+homepage = "https://github.com/KeiSei84/KeiSeiKit-1.0"
 
 [workspace.dependencies]
-clap = { version = "4", features = ["derive"] }
+clap = { version = "4", features = ["derive", "env"] }
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
 serde_yaml = "0.9"
@@ -205,6 +209,9 @@ walkdir = "2"
 pretty_assertions = "1"
 # Shared async + HTTP deps (Waves 31/32/33/35/36 etc — kei-tty / kei-router / etc)
 tokio = { version = "1", features = ["rt-multi-thread", "macros", "signal", "net", "time", "process", "fs", "io-util", "sync"] }
+tower = { version = "0.4", features = ["limit", "buffer", "util"] }
+dashmap = "5"
+notify = "8"
 tokio-stream = "0.1"
 futures = "0.3"
 reqwest = { version = "0.12", features = ["json", "stream", "multipart", "rustls-tls"], default-features = false }